Job description

This role is located in Somerville, MA - We are a hybrid work environment and are in the office 3+ days/per week. Tulip , the leader in AI-native frontline operations, is helping companies around the world equip their workforce with composable, connected apps, leading to higher quality work, improved efficiency, and end-to-end traceability across operations. Tulip's cloud-native, no-code platform, powered by embedded AI, is driving the digital transformation of industrial environments through composable, human-centric solutions that go beyond disrupting the Manufacturing Execution System (MES) category. A spinoff out of MIT, Tulip is headquartered in Somerville, MA, with offices in Germany, Hungary, Singapore, Israel and Japan. Tulip has been recognized as a World Economic Forum Global Innovator, a 2024 Deloitte Technology Fast award winner, one of Energage's Top Workplaces USA, and one of Built In Boston's "Best Places to Work" and "Best Midsize Places to Work." About You: You’re a hands-on Security Engineer who partners closely with Infrastructure and Product Engineering teams and acts as a subject matter expert across a broad range of security domains. As part of Tulip’s Security team, you'll improve and expand our cloud, detection, and vulnerability-management work that keeps our platform and our customers safe. You will operate primarily in AWS, build and automate security controls as code (Terraform, Lambda/Python), and help mature the security posture of our environment. What skills do I need? 5+ years of experience in security engineering, with hands-on ownership of cloud security work Deep, hands-on experience securing AWS and/or Azure environments, including containerized and Kubernetes (EKS/AKS) workloads Building and managing security controls as code with Terraform and Python, or similar Authoring and tuning detections and SIEM rules, and running vulnerability and container-image scanning in CI Working knowledge of a compliance framework such as FedRAMP, ISO 27001, or SOC 2, and the evidence practices behind it Nice to have: incident response or forensics experience, threat modeling of new services, or running internal security exercises Bachelor's degree in a technical field, or equivalent working experience Key Responsibilities: Design, build, and maintain security controls as code across our cloud environments, including posture hardening and account-level guardrails Own vulnerability management end-to-end — triage findings across environments, prioritize to control noise, and drive remediation to closure Own the recurring alert-review workflow: tune detections, cut false positives, and improve coverage over time Build and maintain log-ingestion and SIEM pipelines, and participate in incident response Partner with engineers and product managers on architecture, authentication, and application security reviews, including code review and automated testing Support our FedRAMP program and other compliance efforts — documentation upkeep, alert monitoring, evidence collection, running training exercises, and customer security questionnaires Key Collaborators: Infrastructure and Product Engineering IT, Legal & Compliance, and Product Management Engineering and Security leadership Working At Tulip We know even great candidates experience imposter syndrome. Even if you don't match every requirement, applying gives you the opportunity to be considered. We're building a strong, diverse team that values hard work, families, and personal well-being. Benefits of working with us include: Direct impact on product and culture Company equity Competitive benefits package including Health, Dental, Vision, Short-term Disability, Long-term Disability, Life Insurance, AD&D Insurance, Flexible Spending Account (FSA), Commuter Benefits, Parental Leave, and 401(K) Flexible work schedule and unlimited vacation policy Learning & Development program Virtual company events and happy hours Fitness subsidies An inclusive, dog-friendly office with diverse and inspiring colleagues We are an equal opportunity employer. At Tulip, we celebrate all. Qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. Help us build an inclusive community that will transform frontline operations. The compensation information displayed on each job posting reflects the range for new hire pay rates for the position across all US locations. Within the range posted, actual compensation will be determined depending on multiple factors including job-related knowledge & skills, experience, business needs, geographical location, market compensation data, and internal equity. Expected compensation ranges for this role may change over time. The salary range for this position is $110,000 - $150,000 per year. It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability. Please note that we may use AI-based tools to support parts of our hiring process. All data processing is carried out in compliance with local data protection laws, ensuring all personal candidate information is handled securely and ethically.

Requirements

Must-haves

What skills do I need?
5+ years of experience in security engineering, with hands-on ownership of cloud security work
Deep, hands-on experience securing AWS and/or Azure environments, including containerized and Kubernetes (EKS/AKS) workloads
Building and managing security controls as code with Terraform and Python, or similar
Authoring and tuning detections and SIEM rules, and running vulnerability and container-image scanning in CI
Working knowledge of a compliance framework such as FedRAMP, ISO 27001, or SOC 2, and the evidence practices behind it
Bachelor's degree in a technical field, or equivalent working experience
Design, build, and maintain security controls as code across our cloud environments, including posture hardening and account-level guardrails
Own vulnerability management end-to-end — triage findings across environments, prioritize to control noise, and drive remediation to closure
Own the recurring alert-review workflow: tune detections, cut false positives, and improve coverage over time
Build and maintain log-ingestion and SIEM pipelines, and participate in incident response
Partner with engineers and product managers on architecture, authentication, and application security reviews, including code review and automated testing
Support our FedRAMP program and other compliance efforts — documentation upkeep, alert monitoring, evidence collection, running training exercises, and customer security questionnaires
Infrastructure and Product Engineering
IT, Legal & Compliance, and Product Management
Engineering and Security leadership
Working At Tulip
We know even great candidates experience imposter syndrome. Even if you don't match every requirement, applying gives you the opportunity to be considered.
We're building a strong, diverse team that values hard work, families, and personal well-being. Benefits of working with us include:
Direct impact on product and culture
Company equity
Learning & Development program
Virtual company events and happy hours

Nice-to-haves

Nice to have: incident response or forensics experience, threat modeling of new services, or running internal security exercises

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aigoawspythonazurekubernetes

Platform: greenhouse
Effort: quick

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Parental Leave